What are the implications of unmasking NRIC numbers? | Deep Dive podcast

[@askg_androidshare]

Ever noticed how big companies or schools sometimes make a huge deal about something, saying it's super important? Like, "Don't be late!" or "Honesty is the best policy!" they shout from the rooftops. Then, someone high-up messes up, breaks the rules, and...nothing really happens. Suddenly, that "super important" thing doesn't seem to matter anymore. Kinda makes you wonder if those rules really mattered in the first place.

[@tnyshare2938]

NRIC is similar to a US driver’s license or social security number that should not be made public. Firstly, once NRIC is leaked, there is no option to change it, unlike your name, which could be changed. Secondly, NRIC is not just an identifier. It consists of other personal information such as birth year, which some would not want to make public.

[@SamStab007]

Banks used NRIC as authentication. What are banks and private entities going to do now? To change their authentication system takes time, not just overnight.

[@chris1916]

Just a question from me to Mr Steven Chia. As you said, are you prepared to mention your NRIC number over the air? C'mon, NRIC number is unique to individuals. People may have the similar names, but not NRIC number.

[@ewmurphy]

Fundamentally, its an issue of privacy and potential risk exposure. They shd not centre their apology and press conference around technicalities, demarcating identifier vs authenticator. While the latter demarcation may be possible in the digital realm, NRIC carries both identification and implied authentication highly pervasive in non-digital interactions, otherwise whats the point of holding an ID. Apart from the lapse, this fiasco illuminates a much broader issue that the ministers are too binaristic and dearth strategic-minded in their policy planning based on singular lens of digital development, missing fundamental, overaching governing principle and failure to connect the dots. Public trust is eroding, fiasco one after another.

[@Buttercookies0]

Until now I still do not have any idea why the govt suddenly make a u-turn. Did I miss their explanation? Did something happen that make the govt take this action?

[@megantan89]

Its all started when veteran reporter Bertha Henson discovered that IC and other details can be searched on ACRA website.

[@musico3415]

An interior design company called Design4Space collected my relative's nric by photocopying front of back of her nric when she decided to contract this company for doing her home renovation. This is far worse than simply collecting just the nric numbers as it also contained the holder's nric date of issue and more. When asked why the need to photocopy nric, the interior designer, Daniel, said it is his company's policy. When asked PDPC, staff said it is up to the company's pdpa manager to decide. So what is going on here?

[@dachee]

@musico3415 If I am not wrong, the PDPA does not allow a company to have a policy whereby a customer has to provide their personal data unless it is within the local law. From my experience, do not call the PDPC. Write in for an official reply and for your record.

[@dachee]

@musico3415 You may also which to ask for the company Data Protection Officer business contact information so that you can ask him about why such data is required and how it is protected.

[@musico3415]

@@dachee unfortunately, this ID company did not appoint any data protection officer at the point of the act.

[@dachee]

@@musico3415 If this is the case. The company would likely have breached the PDPA.

[@musico3415]

@@dachee But pdpc staff didn't take any action about it. He simply said to wait for the company to appoint a data manager. In any case, pdpc staff said that it is up to the company to decide whether disclose nric number or even photocopying nric is a requirement for contract signing. So it means pdpc is not helping.

[@gohkenny]

Let's make things easier for scammers

[@louischen2109]

Full name, how many similar one are there? While nric number is there any one sharing the same number? To say that nric number and full name carry the same weight is firstly a challenging sentence. If the rest argument is based on this assumption, no further extension of constructive statements can be generated thereafter. To hear this statement at that level of authority is shocking and worrying. Moving forward can be quite a difficult decision to place without the fear any objective dealings.

[@dachee]

If I am not wrong, NRIC number can be generated and validated online. But there is no online link between an NRIC number and a person's name except from Bizfile. In my opinion, this would likely make it easier for criminal activities.

[@audreyDsouza]

opens up opportunities for scammers.,

[@chenghonggoh4746]

Seems that the government has a different set of guidelines separate from the PDPC for the rest of the country. 😂

[@papa-dt1cv]

How easy to reset singpass ID

[@garethrogers1142]

I’m disgusted by the approach from your experts…… the government should be broadcasting an advisory to the public to protect them from all the scams that will open up now. The ramifications are exponential ! I’m telling my family to ask for passport details….. this so badly announced but I’m very happy you have raised this issue and change… well done 👍

[@vincecarlo]

SO MUCH For PDPA THUMPING Their Chest then, what now ?

[@sleepy_dobe]

NRIC stands for "National Registration Identification Card". Self-explanatory. It's only for identification, not verification. It's the businesses and individuals that have, over time, used it for verification that have "mis-used" the NRIC number. And yes, govt agencies have also been guilty of that. That's why there's now such a big hoo-ha about unmasking it. There shouldn't have been any huge commotion over this.

[@vincecarlo]

4G A Bunch of CLUELESS 🤡🤡🤡

[@garethrogers1142]

Put in lay language so you can protect all people from this great broadcast 👍

[@miklee4834]

These guys are trying to spin the story.😂😂😂😂😂😂😂

[@燕青-p8y]

So now can show ic to anyone or what? Security guard can collect our ic? 😮

[@dachee]

@燕青-p8y No. If I am not wrong, if someone has your NRIC details, they can reset your SingPass, and from this change, log into your bank account to withdraw money without the bank knowing it.

[@c_hahahaha]

after millions spent implementing pdpa and getting companies to do masking of nric numbers. Lol

[@ronron1388]

Kasi hukuman berat bagi 3 pedophile. Pandai malu tapi buat macam ini. Why allow post bail?

[@newworldhello]

Stupidity. Why? Because we should maximise security.

[@prana888]

actually there's nothing wrong to show full NRIC. it really is like a digital ID. just dont know what went thru their heads when they said it was PDPA last time. full of crap

[@dachee]

@prana888 In my opinion, there are many things that can happen when the full details of your NRIC are available to the public!

[@prana888]

@ authentication and verification methods have to change instead. If NRIC is not safe in public, anybody’s full name wouldn’t be safe too!

[@dachee]

@prana888 It is not safe with the current system if the NRIC details are easily accessed to the public. Changing it takes time and money. It may be too late if we are not careful.

[@davinxi5926]

It’s a great idea for transparency! And public good